CHECK OF FINGERPRINTS 



Technical Field 

The present invention relates to a method of pre- 
venting false acceptance in a system for checking finger- 
prints, which comprises a sensor. The invention also 
relates to a system for fingerprint checking, and a 
computer -readable storage medium- 
Background Art 

It is known to use fingerprint checking systems to 
control access to a protected object, for example infor- 
mation or premises. 

A fingerprint checking system can be divided broadly 
into three parts - a sensor, a memory and a processor, 
Ttie sensor is used to record fingerprints. The processor 
compares the fingerprint recorded by the sensor with a 
previously recorded reference fingerprint, what is known 
as a template, which is stored in the memory. If the 
recorded fingerprint corresponds to the reference finger- 
print^ the system accepts the recorded fingerprint and 
allows access to the protected object. 

Two terms used within this field are FAR (False 
Acceptance Rate) , in other words the frequency of false 
acceptances, and FRR .(False Rejection Rate) , in other 
words the frequency of false rejections. FAR is therefore 
a measure of the probability that an unauthorised person, 
whose fingerprint is not stored as a reference finger- 
print in the system, will incorrectly gain access to the 
protected object, and FKR is a measure of the probability 
that an authorised person, whose fingerprint is stored as 
a reference fingerprint in the system, will incorrectly 
be denied access to the protectee object. The ideal value 
of both terms is 0 . 

When a fingerprint sensor is used, a finger i5 
placed against it. When the finger is removed from the 
sensor^ traces of rne fingerprinu may remain. TherB ' 
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traces may be caused by the usually greasy surface of the 
finger, by other substances on the finger or by Bub- 
stances on the sensor. Such a residual fingerprint is 
referred to below as a latent fingerprint, A latent 
5 fingerprint constitutes a 'security problem because it can 
be intensified and in the worst case lead td false 
acceptance, in other words an unauthorised person gaining 
access to the protected object. 

In many fingerprint checking systems^, use is made of 

10 silicon sensors, also called capacitive sensors. A sili- 
con sensor utilises information about a fingerprint 
having height differences and the finger having a spe- 
cific resistance and a specific capacitance. In the event 
that there is a latent fingerprint on a silicon sensor, 

15 the sensor can be fooled into recording a fingerprint by 
breathing lightly on it or cupping a hand over it. If 
the latent fingerprint belongs to an authorised person, 
an impostor can in this way fool the system into granting 
him access to the protected object. 

2 0 Optical sensors are another type of sensor used in 

fingerprint checking systems. An optical sensor records 
an image of -Lh.^ fingerprint if any part of the finger is 
located sufficiently close to the sensor surface- In this 
case, the law of total reflection applies. If there is 

25 a latent fingeirprint on the optical sensox, the system 
can be fooled into recording and accepting a fingerprint 
in spite of the fact that there is no finger on the 
sensor by darkening the surface of the sensor 1 There is . 
therefore a risk that an unauthorised person will in this 

30 way gain access to the protected object. 

The problem with latent fingerprints may occur in 
any fingerprint sensor which requires the user's finger 
to be in. touch with the sensor surface and which records 
the user's fingerprint by a single image. The problems 

35 associated with latent fingerprints thus mean that FAR 
has a high value. 



Summary of the Invention 

One object of the jinvention is therefore to solve 
the above-mentioned problems. 

This object is partly or fully achieved by a method 
according to claim 1^ a system according to claim 12 and 
a storage medium according to claim 1^. 

According to a first aspect, the present invention 
thus relates to a method of preventing false acceptance 
in a system for checking fingerprints which comprises a 
sensor, comprising the step of detecting a latent finger- 
print on the sensor. 

ThuS/ according to the invention, the presence of a 
latent fingerprint on the sensor is detected, so that the 
latent fingerprint can be rejected. In this way, the risk 
is removed of an unauthorised person gaining access, by 
means of a latent fingerprint, to the protected object, 
for example information or a room, which is protect:ed"by 
the system for fingerprint checking. One advantage of 
this method is that it is simple and can be used in 
existing systems. Furthermore, it does not require any 
mechanical constructional changes. Nor does it require 
any complicated and time-consuming external treatment of 
the surface of the sensor in order to remove any latent 
fingerprints between recorded fingerprints. 

As mentioned above, a latent fingerprint is a 
fingerprint which remains on the sensor after the finger 
to which it belongs has been removed from the sensor. 

It should be stressed that the method does hot 
prevent false acceptances, which occur due to other 
reasons than latent fingerprints- Thus it reduces the 
overall rate of false acceptance but prevents false 
acceptance due to latent fingerprints. 

In one embodiment, the step of detecting a latent 
fingerprint comprises the steps of recording a finger- 
print by means of the sensor and^ on the basis of the 
location of the recorded fingerprint on the sensor, 
evaluating whether the recorded fingerprint originates 
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from a latent fingerprint on tiie sensor or from a finger 
placed on the sensor. 

It would be possible to detect the latent finger- 
print .in various ways, for example by measuring the total 
5 light level-' However; using the location of the/ finger- 
print on the sensor has proved to be a simple and neat 
solution. This is because the probability of two people 
one after the other placing their finger in exactly the 
same place on the sensor is very low, in the order of 1 

10 in 1000. If, however, somebody attempts to use a latent 
fingerprint in order to fool the system, the latent 
fingerprint will be situated in exactly the same place as 
the ''authentic" fingerprint. This distinction can be used 
in order to -evaluate whether a recorded fingerprint ori- 

15 ginates from a latent fingerprint or from an actual 
finger on the sensor. 

In one embodiment, the evaluation step comprises",""' 
more specifically, comparing the location of the recorded 
fingerprint on the sensor with the location of a pre- 

2 0 viously recorded fingerprint on the sensor. 

This procedure is simple to implement, for example 
by means of a simple algorithm carried out in software 
or hardware. The location is easy to determine and the 
location of the previous fingerprint can be saved without 

25 a heavy requirement for memory space. 

One embodiment also comprises the step of, if the 
location of the recorded fingerprint on .the sensor and 
the location of the previously ..recorded fingerprint 
essentially correspond, considering the recorded finger- 

30 print as originating from a latent fingerprint. In this 
case, the fingexpsrint is rejected, access to the system 
thus being denied. 

It is to be pointed out that the recorded finger- 
print can in certain embodiments be considered as origi- 

35 nating from a latent fingerprint if the difference in 
location lies within a predetermined narrow range, for 
example one or two pixels. Complete identity is therefore 



not necessarily required, because th.e comparison algo- 
rithm can contain a degree of uncertainty. 

It is usually gufficient to compare the recorded 
fingerprint with a single previously recorded finger- 
print", because the latent fingerprint is -destroyed when 
a new user placea his finger against the sensor. 

In one einbodiment, the previously recorded finger- 
print is the immediately preceding fingerprint which was 
considered as originating from a finger placed on the 
sensor. This means that the previously recorded finger- 
print may belong to an unauthorised person and that 
latent fingerprints of both authorised and unauthorised 
persons can be detected. 

In an alternative ernbodiment, the previously record- 
ed fingerprint is the immediately preceding fingerprint 
which was accepted, in other words considered as origi- 
nating from an authorised person whose reference finger- 
print is stored in the system. 

Thus, according to the latter alternative only 
fingerprints of authorised persons are stored as the pre- 
viously recorded fingerprint. Thus, only latent finger- 
prints of authorised persons can be detected- if the 
latent fingerprint originates from an unauthorised 
person, the matching procedure can, however, take care 
of the rejection of the latent fingerprint so that it 
does not result in a false acceptance. Alternatively, the 
check for latent fingerprint is carried out after the 
matching procedure, so that only fingerprints accepted by 
the matching procedure are tested- 

One embodiment also comprises the step of storing 
the location of tjae recorded fingerprint on the sensor in 
the event that the recorded fingerprint is not considered 
as originating from a latent fingerprint. 

The location of the recorded fingerprint may replace 
a previously stored location of a previously recorded 
f ingeirprint . The fingerprint with which comparison is 
carried out for detection of a latent fingerprint may 



therefore be changed continuously. Temporary storage of 
only one previously recorded fingerprint at a time is 
thus suf f icientf or the purpose of detecting latent 
fingerprints. 

Jn one embodiment, the location of a fingerprint on 
the sensor may be stored in a memory when the fingerprint 
is accepted as belonging to an authorised person. The 
location of this fingerprint may then be used for 
comparison with the location of later recorded finger- 
prints xmtil a new fingerprint is accepted. When the new 
fingerprint is accepted, the location of the previous 
fingerprint on the sensor is no longer required, and the 
location of the new accepted fingerprint can replace that 
of the previous one. 

It is to be stressed that it is the location of the 
fingerprint in the coordinate system of the sensor which 
is stored. The entire previously recorded fingerprint 
CBXif but does not have to, be stored- In a memory-saving 
embodiment, the location of only certain partial areas or 
certain points of the fingerprint is stored e.g. in the 
form of coordinates. 

In one embodiment, the step of comparing the loca- 
tion of the recorded fingerprint on the sensor with the 
location of a previously recorded fingerprint comprises 
comparing the location on the sensor of at least one 
feature of the recorded fingerprint with the location of 
the corresponding feature of the previously recorded 
fingerprint- 

A common method used for fingerprint checking is 
feature matching. In this method, a 'number of specific 
features are com:^ared in order to decide whether a 
recorded fingerprint corresponds to a reference finger- 
print and thus originates from an authorised person. 

One or more such specific features can also be used 
in order to detect a latent fingerprint. More specifi- 
cally, the locations of these features on the sensor are 
compared for the current recorded fingerprint and the 



previously recorded fingerprint . If the features are 
located in the same or essentially the same place on the 
sensor in the two fingerprints coTrpared, the current 
recorded fingerprint is considered as originating from a 
5 latent fingerprint, A feature may be, for example, the 
end of a fingerprint line or a split of a fingerprint 
line. 

An alternative method used in fingerprint checking 
is to match partial areas in a reference fingerprint 

10 against a current recorded fingerprint in order to 'check 
whether the partial areas are present in it and the 
recorded fingerprint thus originates from an authorised 
person. Partial areas can also be used for detection of 
latent f ingerp^r-ints, checking being effected on the basis 

15 of the location of the partial areas on the sensor for 

the current and the previously recorded fingerprint . This 
alternative has the advantage that it is more reliable 
than the method using specific features because, when the 
location of partial areas on the sensor is compared, it 

20 is known with greater certainty that corresponding areas 
are actually being compared. 

Thus, in one embodiment the step of comparing (130) 
the location of the recorded fingerprint on the sensor 
with the location of a previously recorded fingerprint 

25 comprises comparing the location on the sensor of a 

partial area of the recorded fingerprint with the loca- 
tion of a corresponding partial area of the previously 
recorded fingerprint , 

As a further alternative, the location of the entire 

3 0 fingerprint can be compared, e,g, by separating the 

foreground and the background of the fingerprints so that 
the locations of the contours of the fingerprints may be 
compared or by matching the whole f ingerprints- 

A further embodiment may comprise the step of 

35 matching (110) at least one partial area of a reference 
fingerprint with the recorded fingerprint to obtain at 
least one matching partial area of the recorded finger- 
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print, v^herein the step of comparing the location of the 
recorded fingerprint on the sensor with the location of a 
previously recorded fingerprint compriBes corrrparing the 
location on the sensor of the matching partial ^rea with 
the location of the corresponding partial area of the 
previously recorded fingerprint- 

The reference fingerprint is a previously stored 
fingerprint which belongs to an authorised person. The 
reference fingerprint does not have to be a complete 
fingerprint but can be a processed form thereof, what 
is known as a template. The template can comprise e.g. 
partial areas of the reference fingerprint or specific 
features and their location. 

It is to be pointed out that a plurality of refe- 
rence f inge3rprints are usually stored, because there is 
often more than one authorised person for the protected 
object which the fingerprint checking system protects. 
However, it is also possible for only one reference 
fingerprint to be stored- 

In one embodiment; the comparison of the location of 
the recorded fingerprint on the sensor with the location 
of a previously recorded fingerprint is carried out only 
in the event that a matching between a reference finger- 
print and the recorded fingerprint reveals that the 
recorded fingerprint originates from an authorised 
person. 

According to this method, matching of the recorded 
fingerprint is carried out first. Only if a reference 
fingerprint is found, which corresponds to the recorded 
fingerprint, is the location of the recorded fingerprint 
on the sensor checked against the location of a previous- 
ly recorded fingerprint on the sensor so as in this way 
to decide whether the fingerprint is a latent fingerprint 
or not. Location checking is thus not carried out if the 
fingerprint is rejected on account of it not being con- 
sidered as originating from an authorised person. 
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According to a second aspect, the invention relates 
to a system for fingerprint checking comprising a sensor, 
the system being arranged to detect a latent fingerprint 
on the sensor so as to prevent false acceptance, 
5 According to a third aspect, the invention relates ' 

to a storage medium for digital information; which is 
readable for a computer system, the storage medium con- 
taining a computer program for preventing false accep- 
tance in a system for checking fingerprints, said program 
10 defining the method in any one of claims l-ll. 

■ What has been said above about the method also 
applies, where appropriate, to the system and the storage 
medium. 

Brief Description of the Drawings 

The invention will be described in greater detail 
15 below with reference to the accompanying drawings, in 
'which 

Fig. 1 shows schematically an .embodiment of a system 
for fingerprint checking; 

Fig- 2 is a flow diagram of an embodiment of the 

2 0 method according to the invention; 

Fig. 3a shows an actual fingerprint, and 

Pig. 3b shows a latent fingerprint. 
Description of a Preferred Embodiment 

Pig. 1 shows schematically a system for fingerprint 
checking. The system comprises essentially a sensor 1, 
25 comparison means 2 and a memory 3, The sensor 1 is 

arranged to record a fingerprint from a finger which is 
placed on the sensor, and to feed this to the comparison 
means 2. The sensor 1 can be of, for example, the capaci- 
tive or optical t^ype. It has an integral coordinate 

3 0 system. 

The comparison means 2 can take the form of hardware 
or software and, for example, include a microprocessor 
with suitable programs or a specifically adapted hard- 
ware, e.g. an ASIC (Application Specific Integrated 
35 Circuit) or an FPGA tField Programmable Gate Array) . The 



output signal from the comparison means indicates in some 
manner whether the fingerprint recorded by the sensor is 
accepted, in other words that it originates from an 
authorised person whose reference fingerprint is stored 
in the memory, or is rejected, in other words that it 
originates from an unauthorised person or is evaluated aa 
originating from a latent fingerprint or cannot be 
accepted for another reason. The output signal can be 
used internally in the system, e.g. as a basis for 
creating a lock-up signal or an access signal for a 
protected object, or be sent to an external unit^ elg, a 
display. 

Stored in the memory 3 is/are one or more reference 
f ingerprint (s) which is/are recorded -under secure circum- 
stances from one or more authorised people who is/are 
entitled to have access to the protected object which is 
protected by the system, -The memory may be permanently" " 
connected to the comparison means 2 ozr temporarily 
connected. In the latter case it may consist of a smart 
card or similar portable data carrier. 

The recording of a reference fingerprint may be 
carried out as follows. The sensor captures a grayscale 
digital image of a fingerprint, A quality check is 
carried out to ensure that the sensor is capable of 
distinguishing between "ridges'' and "valleys" on the 
finger. Then the image is binarised. Binarisation means 
that the pixels of the image are compared with a grey-, 
scale threshold value. Those pixels which have a value 
smaller than the grayscale threshold value are converted 
to white and those which have a value greater than the 
grayscale threshold value are converted to black. 

After binarisation, a number of partial areas of the 
image are selected for storage as a processed form of the 
reference fingerprint, also called a template. One of the 
partial areas is selected so as to lie fairly centrally 
in the fingerprint. The others, the number of which 
usually varies between four and eight depending on the 
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level of security required, can have varying positions 
in relation to the central area. The size of the partial 
areas selected can be 48 x 48 pixels but can easily be 
adapted by the person skilled in the art according to 
5 existing requirements- The various partial areas can be 
found by searching the image for areas with- as much 
individual-specific information as possible. Areas with 
curved lines, for example, are of greater interest than 
areas with straight parallel lines. The template, which 

10 also comprises the relative locations of the other' 

partial areas in relation to the central area, is ttien 
stored in the memory 3 . 

The flow chart of Fig. 2 shows how fingerprint 
checking is carried out when a user wishes to have access 

15 to the protected object; for example sensitive informa- 
tion or a. locked passage, to which the system can grant 
access by fingerprint checking. The user places his - *• 
finger on the sensor 1, and a digital sarr^le image of the 
fingerprint is recorded in a recording step 10 0 in the 

2 0 same manner as above when the template was recorded, 

apart from the fact that no areas are initially selected. 
After recording, the sample fingerprint therefore has a 
format which makes possible comparison with the template 
which is stored in the memory 3. 
25 The comparison means 2 are arranged to receive the 

recorded sample fingerprint and match it in a matching 
step 110 with the reference f ingerprint (s) stored in the 
memory 3. During matching, it is in this case checked 
whether the partial areas of the template are present in 

3 0 the recorded fingerprint- More particularly, the central 

partial area of the template is matched against a central 
part of the recorded sample fingerprint. If a match is 
obtained, the relative location information of the 
template is used to select partial areas of the sample 
35 fingerprint. The partial areas of the sample fingerprint 
are selected to have the same relative locations with 
regard to the matching partial area of the sample finger- 
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print as have the other partial areas of the template 
with regard to the central partial area of the template. 
Finally, the partial areas of the template are matched 
against the selected partial areas of the sample finger- 
print to- determine whether a- matching requirement is' 
fulfilled. If so, the recorded sample fingerprint is 
considered as originating from an authorised person, 

PCT/SE99/00553 describes a slightly different method 
for selecting the part areas of the sample fingerprint , 

If the recorded fingerprint is not considered ' as 
originating from an authorised person, step 120 ^ t.he 
fingerprint is rejected, step 125, If, however, it is 
considered as originating from an authorised person, the 
method continues with a check of whether the fingerprint 
may be a latent fingerprint. 

More specifically, the location on the sensor 1 of 
the recorded sample fingerprint is compared, in step 13 0, 
with the location on the sensor 1 of the immediately 
preceding accepted fingerprint. In this connection, use 
is made of those partial areas of the recorded sample 
fingerprint which in step 110 were considered as matching 
the partial areas in the reference fingerprint. The loca- 
tions of these matching partial areas in the coordinate 
aystem of the sensor are determined, for example the 
central points of the partial areas can be used, and are 
compared with the locations of corresponding partial 
areas of the previously recorded fingerprint. If the 
location of at least one partial area is the same/ step 
140, the recorded fingerprint is considered as being 
located in the same place as the previously recorded 
fingerprint. The result is that the recorded fingerprint 
is rejected, step 145, on account of the fact that it is 
considered to be a latent fingerprint. It should be 
stressed that also partial areas, the locations of which 
deviate with one or a few pixels, may be considered as 
being located in the same place. 
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If none of the partial areas is located in the same 
place/ the recorded fingerprint is considered as origi- 
nating from an actual finger on the sensor. The locations 
on the sensor of the matching partial areas in the^ re- ■ 
■corded fingerprint are then stored in the memory 3 /.step 
150, as the location of a previously recorded finger- 
print. More specifically, the coordinates of each of the 
partial areas are stored. The coordinates may be the 
coordinates of one or more predetermined points in the 
partial airea-s,. e,g. the central points or the corner 
points. The storage is only temporary and lasts only 
until a later recorded fingerprint is processed in step 
150, 

Finally, the recorded fingerprint is accepted in 
step 155 as a fingerprint of an authorised person, and 
the system signals this appropriately, for example by 
means of a simple OK signal or a control signal which 
allows access to a protected object, for example a room 
or a computer- 

Fig, 3a schematically shows a first image of an 
actual fingerprint recorded from a finger on a sensor. In 
the fingerprint, the location of the central points 4 of 
five partial areas are marked. Pig- 3b shows a second 
image of a recorded fingerprint which originates from a 
latent fingerprint, which remained on the sensor after 
recording of the fingerprint in Fig. 3a, In Fig, 3b, the 
same partial areas have been found and the central 
points thereof are marked- Alternatively, the points 4 
could illustrate the location on the sensor of correspon- 
ding features . The fingerprint images are shown in a 
respective coordinate system, where R is the row coordi- 
nate axis and C is the column coordinate axis, to schema- 
tically indicate that the locations of the points 4 are 
the same- It is sufficient for the location of one point 
(for example the coordinates of the central point of one 
partial area or the coordinates of one feature) to corre- 
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spond in the two fingerprints compared in order to con- 
sider the location of the fingerprints as corresponding. 

The comparison can be carried out by comparing the 
.coordinates of the points, and, if they are the same or 
essentially the same, the current fingerprint is "conside- 
red as being a latent fingerprint which originates from 
the preceding fingerprint, and the fingerprint is rejec- 
ted. It has been found that a good limit value is if the 
test points are separated fay fewer than two pixels in the 
X direction and the y direction. The limit value is then 
compared with all the test points . 

The comparison can be carried out as follows (semi 
program code) : 

For I = 1 to number of points 

Do 

If abs (R1I-R2I)<2 and abs (C1I-C2I) <2 
Then" 

Latent Fingerprint present 
Exit 

End 

End 
Exit 

Where Rll is the row coordinate of point I of the first 
image, R2I is the row coordinate of point I of the second 
image, ClI is the column coordinate of point I of the 
first image, and ClI is the column coordinate of point I 
of the second image. 

If there are no time constraints, the entire image* 
or the entire detailed pattern can be compared. 
Alternative embodiments 

Although a special embodiment of the invention has 
been described above, it is evident for the person 
skilled in the art that many alternatives, modifications 
and variations are possible in the light of the above 
description. 

Fig. 1 shows the sensor 1, the comparison means 2 
and the memory 3 as separate physical units which are 
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interconnected by means of lines. Other variants are also 
possible. The sensor 1 and the comparison means 2 can, 
for example; be integrated with one another and located 
in the same physical unit wiiich is connected to the 
memory 3 wliich is located in another physical unit. The 
sensor 1, the comparison means 2 and the memory 3 can 
also all be integrated in a single physical unit. 

In a further alternative, the memory 3 consists of a 
data carrier in the form of a personal card, e.g. a smart 
card, on which the fingerprint of the owner is stored in 
electronic form so that it can be read into the compa- 
rison means 2 via a reader which can be located in the 
same physical unit as the sensor and the comparison unit. 

It is also possible for the system to have a plura- 
lity of sensors 1 which are connected to a central unit 
which contains the memory 3 for storing reference finger- 
prints and the comparison means 2. The system can con- 
tain a special reference sensor for recording reference 
fingerprints , 

The fingerprint can be stored in the form of a bit 
map. An efficient algorithm for matching bit maps is 
described in Applicant's Swedish Patent Application SE 
9704925-8 . 

Above, the matching of fingerprints has been descri- 
bed as based on the comparison of partial areas of a 
current fingerprint with partial areas of a template - 
Alternatively, it may, however, be based on the compari- 
son of specific features, also called minutiae points, of 
the current fingerprint and the template. 

Furthermore, the detection of a latent fingerprint 
has been described as based on the comparison of the 
locations on the sensor of partial areas in a current 
fingerprint with the locations on the sensor of partial 
areas in a previously recorded fingerprint- The detection 
can however also be carried cut on the basis of the 
locations of corresponding features- 
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Another alternative is to extract the contour of the 
current fingerprint and to compare its location on the 
sensor with the location o the sensor of a contour of a 
previously recorded fingerprint, . 
5 Yet another alternative is to match the entire 

current fingerprint to the entire previously recorded 
fingerprint and to determine whether they are located in 
the same position on the sensor. 

In the above -described embodiment , the location of 

10 the previously recorded fingerprint is stored in the 

memory 3, which may be a memory permanently or temporari- 
ly connected to the comparison means 2 . However, the 
location of the previously recorded fingerprint may also 
be stored in a memory in the sensor or in the same hard- 

15 ware component as the sensor. The advantage with this is 
that the system cannot be fooled by a switch of sensors. 
Alternatively, the location of the previously recorded 
fingerprint can be stored in conjiinction with the temp- 
late used for matching of the previously recorded finger- 

20 print. Next time this particular template is used for 
matching; the location of the sample fingerprint is 
checked against the location of the previously recorded 
fingerprint stored in conjunction with the template to 
evaluate whether the sample fingerprint is a latent 

2 5 fingerprint . 



